Dears,
Many of our customers informed us that they are unable to register or enroll their devices using the ZATCA OTP , please find below the CSR and the response from ZATCA API.
{“csr”:
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
}
Response details :
{StatusCode: 400, ReasonPhrase: ‘Bad Request’, Version: 1.1, Content: System.Net.Http.HttpConnectionResponseContent, Headers:{ Connection: Keep-Alive Transfer-Encoding: chunked Date: Tue, 26 Aug 2025 14:49:44 GMT Strict-Transport-Security: max-age=15724800; includeSubDomains Server: hide X-Content-Type-Options: nosniff X-Frame-Options: DENY X-XSS-Protection: 1; mode=block Content-Security-Policy: default-src ‘none’; script-src ‘self’; connect-src ‘self’; img-src ‘self’; style-src ‘self’; frame-ancestors ‘none’; form-action ‘self’ Cache-Control: no-store, max-age=0 X-Global-Transaction-ID: c7558bdf68adc9886f94634f Content-Type: application/json}, Trailing Headers:{}}